CVE-2010-4149 Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename. NOTE: s...
HighCVSS 9.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freshwebmaster fresh ftp | <= 5.37 | No fix listed |
| freshwebmaster fresh ftp | = 5.36 | No fix listed |
References
- packetstormsecurity.org
- 41798 third-party-advisory vendor-advisory
- www.htbridge.ch
- 68667 vdb-entry
- 20101013 Directory Traversal Vulnerability in FreshFTP mailing-list
- 44072 vdb-entry
- freshftp-ftp-dir-traversal(62555) vdb-entry